@fkn/lib 0.9.33 → 0.9.35

package/{contract-CahPObYc.d.ts → contract-D37GGkou.d.ts}

@@ -1,3 +1,4 @@
+import { B as SelectorPart, f as GotoOptions } from "./index-C_Lqta5o.js";
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
 //#region src/contract.d.ts
 /** The signed-in account, or null when nobody is. */
@@ -65,11 +66,152 @@ type AddressLookupResult = {
   address: string;
   family: 0 | 4 | 6;
 };
+/** @deprecated the pre-category fetch scopes. Still exported so a pinned library keeps compiling; the card maps them to `network`. */
 type FrameFetchScope = 'frame.fetchRead' | 'frame.fetchWrite';
+/**
+ * One row on the cloud consent card.
+ *
+ * A category asks for every capability in it; a `key` asks for one critical permission's own row,
+ * and is refused unless the registry has that key at severity 4. `attach` binds an "Allow once"
+ * answer to the attachment that asked, so no other attachment can consume it.
+ */
 type FrameConsentRequest = {
+  category: 'interaction' | 'storage' | 'network' | 'evaluation';
+  hosts: string[];
+} | {
+  key: string;
+  hosts: string[];
+  attach?: string;
+} | {
   scope: FrameFetchScope;
   hosts: string[];
 };
+/** `'once'` is a critical row answered Allow once, a handoff the middle page takes; `'session'` a row standing for the tab; `false` a refusal. */
+type FrameConsentAnswer = 'once' | 'session' | false;
+/** The osra key of an inline attachment's channel, which `/attach-frame` exposes to the library. */
+declare const ATTACH_FRAME_KEY = "fkn-attach-frame";
+/** The osra key of a window attachment's channel, which `/attach-window` exposes to its opener. */
+declare const ATTACH_WINDOW_KEY = "fkn-attach-window";
+/** The osra key of the render proxy shell's control channel, which its middle page drives. */
+declare const SHELL_CONTROL_KEY = "sdbx-control";
+/** Posted by a shell that could not start, `{ type, message }`, to the middle page framing it. */
+declare const SHELL_ATTACH_ERROR = "sdbx-attach-error";
+/** What an app and its window post to each other, every message carrying the attach id. */
+declare const ATTACH_WINDOW_MESSAGE: {
+  /** app to window, repeated until the channel connects */
+  readonly hello: 'fkn-attach-window';
+  /** window to app, `{ reason }`: the window loaded nothing and exposes nothing */
+  readonly refused: 'fkn-attach-window-refused';
+  /** window to app: this window no longer answers the app, because it is going away or was dropped */
+  readonly gone: 'fkn-attach-window-gone';
+  /**
+   * app to window, whenever the app ends the attachment (its pagehide included): stop answering this
+   * app. `unanswered: true` when it ended because the window stopped answering its pings.
+   */
+  readonly detach: 'fkn-attach-window-detach';
+};
+/** What a window's shell and its middle page say about the shell's cookie jar, all with the attach id. */
+declare const SHELL_JAR_MESSAGE: {
+  /** shell to middle page, once per shell document: send me the port to the opener's jar host */
+  readonly request: 'sdbx-jar-request';
+  /** middle page to shell, carrying exactly one port */
+  readonly port: 'sdbx-jar-port';
+  /** shell to middle page, `{ mode, reason? }`, before the first navigation */
+  readonly mode: 'sdbx-jar-mode';
+};
+/**
+ * Why a window's shell reached no jar, sent as the `reason` of an `'unreachable'` mode report. Only
+ * these names cross the wire, never a value or an error's own text.
+ */
+declare const SHELL_JAR_UNREACHABLE: readonly ['bad-attach', 'no-storage', 'bad-jar', 'no-parent', 'no-jar-host', 'no-token', 'no-indexeddb', 'failed'];
+type ShellJarUnreachable = (typeof SHELL_JAR_UNREACHABLE)[number];
+/**
+ * What a window's middle page, the jar anchor its app mounted (`/attach-jar`) and the anchor's jar
+ * host say, all with the attach id.
+ */
+declare const JAR_ANCHOR_MESSAGE: {
+  /** window to each frame of its opener: is the anchor for this attachment here? */
+  readonly hello: 'fkn-jar-hello';
+  /** anchor to the window it accepted */
+  readonly ready: 'fkn-jar-ready';
+  /** window to anchor, and anchor to jar host, carrying exactly one port */
+  readonly port: 'fkn-jar-port';
+  /** anchor to jar host, after every load of the host frame: are you the jar host? */
+  readonly who: 'fkn-jar-who';
+  /** jar host to anchor: the answer, the only one a port is relayed to */
+  readonly host: 'fkn-jar-host';
+};
+/**
+ * How long a window waits for its app's first hello, from when its page runs. The app says hello
+ * every 250 ms from the moment it opens the window, so only an app that went away misses it.
+ */
+declare const WINDOW_HELLO_TIMEOUT_MS = 20000;
+/**
+ * How long a window waits, from mounting its shell, for the shell to report the jar it runs on: the
+ * shell's jar port wait (12 s), its partition token read (5 s) and a controller boot. The window
+ * exposes its channel only after that report, so the app waits for both of these and more.
+ */
+declare const WINDOW_JAR_MODE_TIMEOUT_MS = 30000;
+/**
+ * How long an app waits for a window's channel. The window exposes it only once it has heard the
+ * app's hello and its shell has reported a jar, each on its own deadline above and one after the
+ * other, and says by name when it cannot; the margin covers the window's own page load and the
+ * channel's handshake after it. Any shorter and the app gives up on a window that is about to
+ * connect, or to say why it cannot.
+ */
+declare const WINDOW_HANDSHAKE_TIMEOUT_MS: number;
+/** A goto on the shell's control channel. */
+type ShellGotoOptions = GotoOptions & {
+  timeoutMs?: number;
+  /**
+   * For an attachment's first navigation: past its deadline, a document that committed but never
+   * fired load counts as loaded, the rule the inline attachment's first load follows. Ignored by a
+   * shell deployed before windows, which rejects at the deadline instead.
+   */
+  commitFallback?: boolean;
+};
+/**
+ * The render proxy shell's control channel (`SHELL_CONTROL_KEY`), as its middle page drives it.
+ * `policy` is the middle page's realm policy for the call; `flushCookies` and `sweepStorage` are
+ * absent from a shell deployed before windows.
+ */
+type ShellControl = {
+  ready(): Promise<boolean>;
+  /** Pulls the committed jar first, so a sign-in another realm committed rides this navigation. */
+  goto(url: string, options?: ShellGotoOptions): Promise<void>;
+  executeLocator(parts: SelectorPart[], operation: string, args: unknown[], policy?: unknown): Promise<unknown>;
+  /** Resolves once every cookie change made so far is committed to the jar's store. */
+  flushCookies?(): Promise<void>;
+  /** Removes a window shell's own site storage; resolves at once for a shell whose storage is shared. */
+  sweepStorage?(): Promise<void>;
+};
+/**
+ * What a middle page exposes to the library, inline (`ATTACH_FRAME_KEY`) and for a window
+ * (`ATTACH_WINDOW_KEY`). `documentHost`, where the frame actually is, is absent from a middle page
+ * deployed before categories.
+ */
+type MiddleControl = {
+  ready(): Promise<boolean>;
+  goto(url: string, options?: GotoOptions & {
+    timeoutMs?: number;
+  }): Promise<void>;
+  executeLocator(parts: SelectorPart[], operation: string, args: unknown[]): Promise<unknown>;
+  documentHost?(): Promise<string>;
+};
+/** What a window's middle page adds to its channel. */
+type WindowMiddleControl = MiddleControl & {
+  /** Draws the consent card in the window and answers each request in order. */
+  requestConsent(requests: FrameConsentRequest[]): Promise<FrameConsentAnswer[]>;
+  /** The app's heartbeat: a window that hears none for long enough stops answering. */
+  ping(): Promise<true>;
+  /** Resolves once every cookie change made in the window so far is committed to its jar. */
+  flushCookies(): Promise<void>;
+  /**
+   * Removes the proxied site storage this window kept to itself, for an app about to close it.
+   * Resolves at once for a window on the web origin's own jar, whose storage is the app's.
+   */
+  sweepStorage(): Promise<void>;
+};
 type DisplayCause =
 /** the frame is not being painted at all, so an ancestor is display:none, visibility:hidden or equivalent */
 'not-rendered' |
@@ -528,7 +670,10 @@ type Resolvers = {
     hide: () => void;
   };
   frameConsent: {
+    /** the legacy single-row entry, kept so a pinned library keeps working */
     ensure: (request: FrameConsentRequest) => Promise<boolean>;
+    /** one card with a row per request; answers in request order */
+    request: (requests: FrameConsentRequest[]) => Promise<FrameConsentAnswer[]>;
   };
   connect: {
     prompt: (consumerOrigin: string) => Promise<boolean>;
@@ -599,4 +744,4 @@ type Resolvers = {
   hideInstallPrompt: () => void;
 };
 //#endregion
-export { SurfaceRect as $, ProxyFetchInit as A, RoomHandle as B, PackageQuery as C, PickOptions as D, PackagesFail as E, RoomBacklog as F, RoomOpenOptions as G, RoomMailbox as H, RoomCreateOptions as I, RoomsErrorCode as J, RoomPermission as K, RoomDefaults as L, Quota as M, Radii as N, Placement as O, Resolvers as P, StorageQuota as Q, RoomEnd as R, OverlayState as S, PackagesErrorCode as T, RoomMember as U, RoomJoinOptions as V, RoomMessage as W, SetOverlayHost as X, RoomsFail as Y, StorageEntry as Z, InstallOptions as _, ConflictChoice as a, UdpSocketOptions as at, MountDescriptor as b, ConnectAvailability as c, DisplayLevel as d, TcpSocketListenerOptions as et, DnsLookup as f, HiddenSurface as g, FrameFetchScope as h, AdoptState as i, UdpDatagram as it, ProxyFetchInput as j, ProxyFetch as k, ConnectOptions as l, FrameConsentRequest as m, AddressLookupResult as n, TcpSocketOptions as nt, ConflictRequest as o, UdpSocketResult as ot, EncryptionState as p, RoomPermissions as q, AdoptRequest as r, TcpSocketResult as rt, ConflictSide as s, WriteData as st, Account as t, TcpSocketListenerResult as tt, DisplayCause as u, InstalledPackage as v, PackageResult as w, OverlayRect as x, IpFamily as y, RoomEvent as z };
+export { RoomPermissions as $, PackageResult as A, Resolvers as B, IpFamily as C, WindowMiddleControl as Ct, OverlayRect as D, MountDescriptor as E, ProxyFetch as F, RoomEvent as G, RoomCreateOptions as H, ProxyFetchInit as I, RoomMailbox as J, RoomHandle as K, ProxyFetchInput as L, PackagesFail as M, PickOptions as N, OverlayState as O, Placement as P, RoomPermission as Q, Quota as R, InstalledPackage as S, WINDOW_JAR_MODE_TIMEOUT_MS as St, MiddleControl as T, RoomDefaults as U, RoomBacklog as V, RoomEnd as W, RoomMessage as X, RoomMember as Y, RoomOpenOptions as Z, FrameConsentAnswer as _, UdpDatagram as _t, AddressLookupResult as a, SHELL_JAR_UNREACHABLE as at, HiddenSurface as b, WINDOW_HANDSHAKE_TIMEOUT_MS as bt, ConflictChoice as c, ShellGotoOptions as ct, ConnectAvailability as d, StorageQuota as dt, RoomsErrorCode as et, ConnectOptions as f, SurfaceRect as ft, EncryptionState as g, TcpSocketResult as gt, DnsLookup as h, TcpSocketOptions as ht, Account as i, SHELL_JAR_MESSAGE as it, PackagesErrorCode as j, PackageQuery as k, ConflictRequest as l, ShellJarUnreachable as lt, DisplayLevel as m, TcpSocketListenerResult as mt, ATTACH_WINDOW_KEY as n, SHELL_ATTACH_ERROR as nt, AdoptRequest as o, SetOverlayHost as ot, DisplayCause as p, TcpSocketListenerOptions as pt, RoomJoinOptions as q, ATTACH_WINDOW_MESSAGE as r, SHELL_CONTROL_KEY as rt, AdoptState as s, ShellControl as st, ATTACH_FRAME_KEY as t, RoomsFail as tt, ConflictSide as u, StorageEntry as ut, FrameConsentRequest as v, UdpSocketOptions as vt, JAR_ANCHOR_MESSAGE as w, WriteData as wt, InstallOptions as x, WINDOW_HELLO_TIMEOUT_MS as xt, FrameFetchScope as y, UdpSocketResult as yt, Radii as z };

package/contract.cjs

@@ -0,0 +1 @@
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=`fkn-attach-frame`,t=`fkn-attach-window`,n=`sdbx-control`,r=`sdbx-attach-error`,i={hello:`fkn-attach-window`,refused:`fkn-attach-window-refused`,gone:`fkn-attach-window-gone`,detach:`fkn-attach-window-detach`},a={request:`sdbx-jar-request`,port:`sdbx-jar-port`,mode:`sdbx-jar-mode`},o=[`bad-attach`,`no-storage`,`bad-jar`,`no-parent`,`no-jar-host`,`no-token`,`no-indexeddb`,`failed`],s={hello:`fkn-jar-hello`,ready:`fkn-jar-ready`,port:`fkn-jar-port`,who:`fkn-jar-who`,host:`fkn-jar-host`},c=2e4,l=3e4,u=6e4;exports.ATTACH_FRAME_KEY=e,exports.ATTACH_WINDOW_KEY=t,exports.ATTACH_WINDOW_MESSAGE=i,exports.JAR_ANCHOR_MESSAGE=s,exports.SHELL_ATTACH_ERROR=r,exports.SHELL_CONTROL_KEY=n,exports.SHELL_JAR_MESSAGE=a,exports.SHELL_JAR_UNREACHABLE=o,exports.WINDOW_HANDSHAKE_TIMEOUT_MS=u,exports.WINDOW_HELLO_TIMEOUT_MS=c,exports.WINDOW_JAR_MODE_TIMEOUT_MS=l;

package/contract.d.ts

@@ -1,3 +1,3 @@
 import { o as TcpSocketOption, v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { $ as SurfaceRect, A as ProxyFetchInit, B as RoomHandle, C as PackageQuery, D as PickOptions, E as PackagesFail, F as RoomBacklog, G as RoomOpenOptions, H as RoomMailbox, I as RoomCreateOptions, J as RoomsErrorCode, K as RoomPermission, L as RoomDefaults, M as Quota, N as Radii, O as Placement, P as Resolvers, Q as StorageQuota, R as RoomEnd, S as OverlayState, T as PackagesErrorCode, U as RoomMember, V as RoomJoinOptions, W as RoomMessage, X as SetOverlayHost, Y as RoomsFail, Z as StorageEntry, _ as InstallOptions, a as ConflictChoice, at as UdpSocketOptions, b as MountDescriptor, c as ConnectAvailability, d as DisplayLevel, et as TcpSocketListenerOptions, f as DnsLookup, g as HiddenSurface, h as FrameFetchScope, i as AdoptState, it as UdpDatagram, j as ProxyFetchInput, k as ProxyFetch, l as ConnectOptions, m as FrameConsentRequest, n as AddressLookupResult, nt as TcpSocketOptions, o as ConflictRequest, ot as UdpSocketResult, p as EncryptionState, q as RoomPermissions, r as AdoptRequest, rt as TcpSocketResult, s as ConflictSide, st as WriteData, t as Account, tt as TcpSocketListenerResult, u as DisplayCause, v as InstalledPackage, w as PackageResult, x as OverlayRect, y as IpFamily, z as RoomEvent } from "./contract-CahPObYc.js";
-export { Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, RoomBacklog, RoomCreateOptions, RoomDefaults, RoomEnd, RoomEvent, RoomHandle, RoomJoinOptions, RoomMailbox, RoomMember, RoomMessage, RoomOpenOptions, RoomPermission, RoomPermissions, RoomsErrorCode, RoomsFail, SetOverlayHost, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WriteData };
+import { $ as RoomPermissions, A as PackageResult, B as Resolvers, C as IpFamily, Ct as WindowMiddleControl, D as OverlayRect, E as MountDescriptor, F as ProxyFetch, G as RoomEvent, H as RoomCreateOptions, I as ProxyFetchInit, J as RoomMailbox, K as RoomHandle, L as ProxyFetchInput, M as PackagesFail, N as PickOptions, O as OverlayState, P as Placement, Q as RoomPermission, R as Quota, S as InstalledPackage, St as WINDOW_JAR_MODE_TIMEOUT_MS, T as MiddleControl, U as RoomDefaults, V as RoomBacklog, W as RoomEnd, X as RoomMessage, Y as RoomMember, Z as RoomOpenOptions, _ as FrameConsentAnswer, _t as UdpDatagram, a as AddressLookupResult, at as SHELL_JAR_UNREACHABLE, b as HiddenSurface, bt as WINDOW_HANDSHAKE_TIMEOUT_MS, c as ConflictChoice, ct as ShellGotoOptions, d as ConnectAvailability, dt as StorageQuota, et as RoomsErrorCode, f as ConnectOptions, ft as SurfaceRect, g as EncryptionState, gt as TcpSocketResult, h as DnsLookup, ht as TcpSocketOptions, i as Account, it as SHELL_JAR_MESSAGE, j as PackagesErrorCode, k as PackageQuery, l as ConflictRequest, lt as ShellJarUnreachable, m as DisplayLevel, mt as TcpSocketListenerResult, n as ATTACH_WINDOW_KEY, nt as SHELL_ATTACH_ERROR, o as AdoptRequest, ot as SetOverlayHost, p as DisplayCause, pt as TcpSocketListenerOptions, q as RoomJoinOptions, r as ATTACH_WINDOW_MESSAGE, rt as SHELL_CONTROL_KEY, s as AdoptState, st as ShellControl, t as ATTACH_FRAME_KEY, tt as RoomsFail, u as ConflictSide, ut as StorageEntry, v as FrameConsentRequest, vt as UdpSocketOptions, w as JAR_ANCHOR_MESSAGE, wt as WriteData, x as InstallOptions, xt as WINDOW_HELLO_TIMEOUT_MS, y as FrameFetchScope, yt as UdpSocketResult, z as Radii } from "./contract-D37GGkou.js";
+export { ATTACH_FRAME_KEY, ATTACH_WINDOW_KEY, ATTACH_WINDOW_MESSAGE, Account, AddressLookupResult, AdoptRequest, AdoptState, ConflictChoice, ConflictRequest, ConflictSide, ConnectAvailability, ConnectOptions, DisplayCause, DisplayLevel, DnsLookup, EncryptionState, FrameConsentAnswer, FrameConsentRequest, FrameFetchScope, HiddenSurface, InstallOptions, InstalledPackage, IpFamily, JAR_ANCHOR_MESSAGE, MiddleControl, MountDescriptor, OverlayRect, OverlayState, PackageQuery, PackageResult, PackagesErrorCode, PackagesFail, PickOptions, Placement, ProxyFetch, ProxyFetchInit, ProxyFetchInput, Quota, Radii, Resolvers, RoomBacklog, RoomCreateOptions, RoomDefaults, RoomEnd, RoomEvent, RoomHandle, RoomJoinOptions, RoomMailbox, RoomMember, RoomMessage, RoomOpenOptions, RoomPermission, RoomPermissions, RoomsErrorCode, RoomsFail, SHELL_ATTACH_ERROR, SHELL_CONTROL_KEY, SHELL_JAR_MESSAGE, SHELL_JAR_UNREACHABLE, SetOverlayHost, ShellControl, ShellGotoOptions, ShellJarUnreachable, StorageEntry, StorageQuota, SurfaceRect, TcpSocketListenerOptions, TcpSocketListenerResult, type TcpSocketOption, TcpSocketOptions, TcpSocketResult, UdpDatagram, type UdpSocketOption, UdpSocketOptions, UdpSocketResult, WINDOW_HANDSHAKE_TIMEOUT_MS, WINDOW_HELLO_TIMEOUT_MS, WINDOW_JAR_MODE_TIMEOUT_MS, WindowMiddleControl, WriteData };

package/contract.js

@@ -0,0 +1,28 @@
+//#region src/contract.ts
+var e = "fkn-attach-frame", t = "fkn-attach-window", n = "sdbx-control", r = "sdbx-attach-error", i = {
+	hello: "fkn-attach-window",
+	refused: "fkn-attach-window-refused",
+	gone: "fkn-attach-window-gone",
+	detach: "fkn-attach-window-detach"
+}, a = {
+	request: "sdbx-jar-request",
+	port: "sdbx-jar-port",
+	mode: "sdbx-jar-mode"
+}, o = [
+	"bad-attach",
+	"no-storage",
+	"bad-jar",
+	"no-parent",
+	"no-jar-host",
+	"no-token",
+	"no-indexeddb",
+	"failed"
+], s = {
+	hello: "fkn-jar-hello",
+	ready: "fkn-jar-ready",
+	port: "fkn-jar-port",
+	who: "fkn-jar-who",
+	host: "fkn-jar-host"
+}, c = 2e4, l = 3e4, u = 6e4;
+//#endregion
+export { e as ATTACH_FRAME_KEY, t as ATTACH_WINDOW_KEY, i as ATTACH_WINDOW_MESSAGE, s as JAR_ANCHOR_MESSAGE, r as SHELL_ATTACH_ERROR, n as SHELL_CONTROL_KEY, a as SHELL_JAR_MESSAGE, o as SHELL_JAR_UNREACHABLE, u as WINDOW_HANDSHAKE_TIMEOUT_MS, c as WINDOW_HELLO_TIMEOUT_MS, l as WINDOW_JAR_MODE_TIMEOUT_MS };

package/desktop.d.ts

@@ -2,25 +2,25 @@ declare namespace desktop_d_exports {
   export { available, dgram, dns, fetch, fs, net };
 }
 /** Typed placeholder for the planned desktop backend. Always false in this release. */
-declare const available: () => boolean;
+export declare const available: () => boolean;
 /** Planned desktop fetch backend. Throws in this release. */
-declare const fetch: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export declare const fetch: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
 /** Planned desktop DNS backend. Every method throws in this release. */
-declare const dns: {
+export declare const dns: {
   lookup: (..._args: unknown[]) => never;
 };
 /** Planned desktop TCP backend. Every method throws in this release. */
-declare const net: {
+export declare const net: {
   connect: (..._args: unknown[]) => never;
   createConnection: (..._args: unknown[]) => never;
   createServer: (..._args: unknown[]) => never;
 };
 /** Planned desktop UDP backend. Every method throws in this release. */
-declare const dgram: {
+export declare const dgram: {
   createSocket: (..._args: unknown[]) => never;
 };
 /** Planned desktop storage backend. available() resolves false; storage operations throw. */
-declare const fs: {
+export declare const fs: {
   available: () => Promise<boolean>;
   readFile: (..._args: unknown[]) => never;
   readFileSync: (..._args: unknown[]) => never;
@@ -55,4 +55,4 @@ declare const fs: {
   };
 };
 //#endregion
-export { available, dgram, dns, fetch, fs, net, desktop_d_exports as t };
+export { desktop_d_exports as t };

package/dgram.cjs

@@ -1 +1 @@
-Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-Beky02FK.cjs"),n=require("./busy-Dv8wzE5M.cjs"),r=require("./utils-BvgGdrgN.cjs");require("./wire.cjs");let i=require("buffer"),a=require("events"),o=require("ip-address");var s=e.t({Socket:()=>c,createSocket:()=>m,default:()=>h}),c=class extends a.EventEmitter{_type;_localAddress;_remoteAddress;_connectedLocally;_connectGeneration=0;_destroyed=!1;_busyRelease;_webVPNUdpSocketPromise;_dataPort;_socketId;_sendQueue=[];_sendQueueBytes=0;_sendFlushScheduled=!1;_peerTailCache=new Map;constructor(e){if(super(e),!e)throw Error(`Missing options`);this._type=e.type,e.connection&&this.__webvpn_udp_socket_init__(e.connection)}_lastRecvBufferSize=0;_lastSendBufferSize=0;_lastTtl=64;_lastMulticastTtl=1;_lastMulticastLoopback=!0;_setUdpOption(e){if(!this._webVPNUdpSocketPromise){this.emit(`error`,Error(`Cannot set socket option before bind`));return}this._webVPNUdpSocketPromise.then(async t=>{if(t)try{await t.setOption(e)}catch(e){this.emit(`error`,e)}})}_dataPortAcks=!1;_dataPortConsumedBytes=0;_dataPortAckedBytes=0;_ackDataPortBatch(e){if(!this._dataPortAcks||!this._dataPort||(this._dataPortConsumedBytes+=e,this._dataPortAckedBytes!==0&&this._dataPortConsumedBytes-this._dataPortAckedBytes<524288))return;this._dataPortAckedBytes=this._dataPortConsumedBytes;let t={type:r.n,consumedBytes:this._dataPortConsumedBytes};this._dataPort.postMessage(t)}_onTransportClosed(e){this._destroyed||(this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0,this.listenerCount(`error`)>0&&this.emit(`error`,Error(e||`WebVPN session closed`)),this.emit(`close`))}_onDataPortBatch(e){let t=new DataView(e),n=!1,r,a=0;for(;a+4<=e.byteLength;){let o=t.getUint32(a);a+=4;let s=a+o;if(s>e.byteLength)break;let c=a+4,l=t.getUint8(c);c+=1;let u,d,p;if(l===2){if(!this._remoteAddress){a=s;continue}u=this._remoteAddress.address,d=this._remoteAddress.family,p=this._remoteAddress.port}else{let n=new Uint8Array(e,c,l===0?4:16);l===0?(d=`IPv4`,u=`${n[0]}.${n[1]}.${n[2]}.${n[3]}`):(d=`IPv6`,u=f(n)),c+=n.byteLength,p=t.getUint16(c),c+=2}let m=t.getUint32(c);c+=4;try{this.emit(`message`,i.Buffer.from(e.slice(c,c+m)),{address:u,family:d,port:p,size:m})}catch(e){n||(n=!0,r=e)}a=s}if(n)throw r}_peerTail(e,t){if(e===void 0||t===void 0)return l;let n=`${e}|${t}`,r=this._peerTailCache.get(n);if(r)return r;let i=o.Address4.isValid(e)?d(e):p(e),a=new Uint8Array(1+i.byteLength+2);return a[0]=i.byteLength===4?0:1,a.set(i,1),new DataView(a.buffer).setUint16(1+i.byteLength,t),this._peerTailCache.size>=4096&&this._peerTailCache.clear(),this._peerTailCache.set(n,a),a}_portSend(e,t,n){let r=this._peerTail(t,n),i=new Uint8Array(8+r.byteLength+4+e.byteLength),a=new DataView(i.buffer);a.setUint32(0,i.byteLength-4),a.setUint32(4,this._socketId),i.set(r,8),a.setUint32(8+r.byteLength,e.byteLength),i.set(e,12+r.byteLength),this._sendQueue.push(i),this._sendQueueBytes+=i.byteLength,!this._sendFlushScheduled&&(this._sendFlushScheduled=!0,queueMicrotask(()=>{this._sendFlushScheduled=!1;let e=this._sendQueue,t=this._sendQueueBytes;if(this._sendQueue=[],this._sendQueueBytes=0,!e.length||!this._dataPort)return;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.byteLength;this._dataPort.postMessage(n.buffer,[n.buffer])}))}addMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:5,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:7,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}address(){if(!this._localAddress)throw Error(`EBADF`);return this._localAddress}bind(...e){let n=r.o(...e),i=this._type===`udp6`?`::`:`0.0.0.0`,a=this.__webvpn_udp_socket_init__(t.o(`a udp socket`).then(e=>e.cloud.webvpn.udpSocket({type:this._type,address:n.address??i,port:n.port,dataPort:!0})));return n.callback&&a.then(e=>{e&&n.callback.call(this)}),this}__webvpn_udp_socket_init__(e,t){return t&&(this._localAddress={address:t.localAddress,family:t.localFamily,port:t.localPort}),this._busyRelease??=n.t(`udp socket`),this._webVPNUdpSocketPromise=e.then(e=>{if(e.dataPort)this._socketId=e.socketId,this._dataPort=e.dataPort,this._dataPortAcks=e.dataPortAcks===!0,this._dataPort.onmessage=e=>{try{this._onDataPortBatch(e.data)}finally{this._ackDataPortBatch(e.data.byteLength)}};else{let t=e.dataReadableStream.getReader();(async()=>{for(;;){let{value:e,done:n}=await t.read();if(n)return;this.emit(`message`,i.Buffer.from(e.data),{address:e.address,family:e.family,port:e.port,size:e.size})}})().catch(e=>this._onTransportClosed(e instanceof Error?e.message:void 0))}return e.closed?.then(e=>this._onTransportClosed(e?.reason)).catch(()=>{}),this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},e}).catch(e=>{this.emit(`error`,e)}),this._webVPNUdpSocketPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`listening`)}),this._webVPNUdpSocketPromise}close(e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);return this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=this._destroyed;this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0;try{await t.close()}finally{try{e&&e()}finally{n||this.emit(`close`)}}}).catch(()=>{}),this}connect(...e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=e[0],r=this._type===`udp6`?`::1`:`127.0.0.1`,i=typeof e[1]==`string`?e[1]:r,a=typeof e.at(-1)==`function`?e.at(-1):void 0,o=await t.connect({remotePort:n,remoteAddress:i});this._connectedLocally=o?.local===!0,this._remoteAddress=o?.address?{address:o.address,family:o.family,port:o.port}:{address:i,family:this._type===`udp6`?`IPv6`:`IPv4`,port:n},this._connectGeneration+=1,a&&a()}).catch(e=>{this.emit(`error`,e)})}disconnect(){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);let e=this._remoteAddress,t=this._connectedLocally,n=this._connectGeneration;this._remoteAddress=void 0,this._connectedLocally=void 0,this._webVPNUdpSocketPromise.then(e=>e?.disconnect?.()).catch(r=>{this._connectGeneration===n&&(this._remoteAddress=e,this._connectedLocally=t),this.emit(`error`,r)})}dropMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:6,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:8,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}getRecvBufferSize(){return this._lastRecvBufferSize}getSendBufferSize(){return this._lastSendBufferSize}getSendQueueSize(){return 0}getSendQueueCount(){return 0}ref(){return this}remoteAddress(){if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);return{address:this._remoteAddress.address,family:this._remoteAddress.family,port:this._remoteAddress.port}}send(...e){this._webVPNUdpSocketPromise||this.bind();let t=r.s(...e),n=u(t.message),i=n;if(t.hasRange){let{offset:e,length:r}=t;if(!Number.isInteger(e)||e<0||e>n.byteLength)throw Object.assign(RangeError(`"offset" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});if(!Number.isInteger(r)||r<0||r>n.byteLength-e)throw Object.assign(RangeError(`"length" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});i=n.subarray(e,e+r)}let a=this._type===`udp6`?`::1`:`127.0.0.1`;if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(e=>{if(!e)throw Error(`Socket not bound`);let n=t.callback,r=t.address??a,s=this._remoteAddress!==void 0&&t.address===void 0;if(this._dataPort&&(s||o.Address4.isValid(r)||o.Address6.isValid(r))){this._portSend(i,s?void 0:r,s?void 0:t.port),n?.call(this,null,i.byteLength);return}e.send({port:t.port,address:r,message:i.byteOffset===0&&i.byteLength===i.buffer.byteLength?i.buffer:i.buffer.slice(i.byteOffset,i.byteOffset+i.byteLength)}).then(()=>n?.call(this,null,i.byteLength),e=>n?n.call(this,e,0):this.emit(`error`,e))})}setBroadcast(e){this._setUdpOption({type:0,value:e})}setMulticastInterface(e){}setMulticastLoopback(e){return this._setUdpOption({type:3,value:e}),this._setUdpOption({type:4,value:e}),this._lastMulticastLoopback=e,e}setMulticastTTL(e){return this._setUdpOption({type:2,value:e}),this._lastMulticastTtl=e,e}setRecvBufferSize(e){this._setUdpOption({type:10,value:e}),this._lastRecvBufferSize=e}setSendBufferSize(e){this._setUdpOption({type:9,value:e}),this._lastSendBufferSize=e}setTTL(e){return this._setUdpOption({type:1,value:e}),this._lastTtl=e,e}unref(){return this}addSourceSpecificMembership(e,t,n){}dropSourceSpecificMembership(e,t,n){}async[Symbol.asyncDispose](){await new Promise(e=>{this.close(e)})}},l=new Uint8Array([2]),u=e=>{if(typeof e==`string`)return r.l.encode(e);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(Array.isArray(e)){let t=e.map(u),n=new Uint8Array(t.reduce((e,t)=>e+t.byteLength,0)),r=0;for(let e of t)n.set(e,r),r+=e.byteLength;return n}return new Uint8Array(e)},d=e=>{let t=e.split(`.`).map(e=>parseInt(e,10));if(t.length!==4||t.some(e=>Number.isNaN(e)||e<0||e>255))throw Error(`Invalid IPv4 address: ${e}`);return new Uint8Array(t)},f=e=>{let t=[];for(let n=0;n<16;n+=2)t.push(e[n]<<8|e[n+1]);let n=-1,r=1;for(let e=0;e<8;){if(t[e]!==0){e++;continue}let i=e;for(;i<8&&t[i]===0;)i++;i-e>r&&(n=e,r=i-e),e=i}return n===-1?t.map(e=>e.toString(16)).join(`:`):`${t.slice(0,n).map(e=>e.toString(16)).join(`:`)}::${t.slice(n+r).map(e=>e.toString(16)).join(`:`)}`},p=e=>{let t=new o.Address6(e).getBitsBase16(0,128).match(/.{2}/g);if(!t||t.length!==16)throw Error(`Invalid IPv6 address: ${e}`);return new Uint8Array(t.map(e=>parseInt(e,16)))},m=(e,t)=>{let n=new c(typeof e==`string`?{type:e}:e);return t&&n.on(`message`,t),n},h={Socket:c,createSocket:m};exports.Socket=c,exports.createSocket=m,exports.default=h,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return s}});
+Object.defineProperties(exports,{__esModule:{value:!0},[Symbol.toStringTag]:{value:`Module`}});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-Djf-XdZ4.cjs"),n=require("./busy-Dv8wzE5M.cjs"),r=require("./utils-BvgGdrgN.cjs");require("./wire.cjs");let i=require("buffer"),a=require("events"),o=require("ip-address");var s=e.t({Socket:()=>c,createSocket:()=>m,default:()=>h}),c=class extends a.EventEmitter{_type;_localAddress;_remoteAddress;_connectedLocally;_connectGeneration=0;_destroyed=!1;_busyRelease;_webVPNUdpSocketPromise;_dataPort;_socketId;_sendQueue=[];_sendQueueBytes=0;_sendFlushScheduled=!1;_peerTailCache=new Map;constructor(e){if(super(e),!e)throw Error(`Missing options`);this._type=e.type,e.connection&&this.__webvpn_udp_socket_init__(e.connection)}_lastRecvBufferSize=0;_lastSendBufferSize=0;_lastTtl=64;_lastMulticastTtl=1;_lastMulticastLoopback=!0;_setUdpOption(e){if(!this._webVPNUdpSocketPromise){this.emit(`error`,Error(`Cannot set socket option before bind`));return}this._webVPNUdpSocketPromise.then(async t=>{if(t)try{await t.setOption(e)}catch(e){this.emit(`error`,e)}})}_dataPortAcks=!1;_dataPortConsumedBytes=0;_dataPortAckedBytes=0;_ackDataPortBatch(e){if(!this._dataPortAcks||!this._dataPort||(this._dataPortConsumedBytes+=e,this._dataPortAckedBytes!==0&&this._dataPortConsumedBytes-this._dataPortAckedBytes<524288))return;this._dataPortAckedBytes=this._dataPortConsumedBytes;let t={type:r.n,consumedBytes:this._dataPortConsumedBytes};this._dataPort.postMessage(t)}_onTransportClosed(e){this._destroyed||(this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0,this.listenerCount(`error`)>0&&this.emit(`error`,Error(e||`WebVPN session closed`)),this.emit(`close`))}_onDataPortBatch(e){let t=new DataView(e),n=!1,r,a=0;for(;a+4<=e.byteLength;){let o=t.getUint32(a);a+=4;let s=a+o;if(s>e.byteLength)break;let c=a+4,l=t.getUint8(c);c+=1;let u,d,p;if(l===2){if(!this._remoteAddress){a=s;continue}u=this._remoteAddress.address,d=this._remoteAddress.family,p=this._remoteAddress.port}else{let n=new Uint8Array(e,c,l===0?4:16);l===0?(d=`IPv4`,u=`${n[0]}.${n[1]}.${n[2]}.${n[3]}`):(d=`IPv6`,u=f(n)),c+=n.byteLength,p=t.getUint16(c),c+=2}let m=t.getUint32(c);c+=4;try{this.emit(`message`,i.Buffer.from(e.slice(c,c+m)),{address:u,family:d,port:p,size:m})}catch(e){n||(n=!0,r=e)}a=s}if(n)throw r}_peerTail(e,t){if(e===void 0||t===void 0)return l;let n=`${e}|${t}`,r=this._peerTailCache.get(n);if(r)return r;let i=o.Address4.isValid(e)?d(e):p(e),a=new Uint8Array(1+i.byteLength+2);return a[0]=i.byteLength===4?0:1,a.set(i,1),new DataView(a.buffer).setUint16(1+i.byteLength,t),this._peerTailCache.size>=4096&&this._peerTailCache.clear(),this._peerTailCache.set(n,a),a}_portSend(e,t,n){let r=this._peerTail(t,n),i=new Uint8Array(8+r.byteLength+4+e.byteLength),a=new DataView(i.buffer);a.setUint32(0,i.byteLength-4),a.setUint32(4,this._socketId),i.set(r,8),a.setUint32(8+r.byteLength,e.byteLength),i.set(e,12+r.byteLength),this._sendQueue.push(i),this._sendQueueBytes+=i.byteLength,!this._sendFlushScheduled&&(this._sendFlushScheduled=!0,queueMicrotask(()=>{this._sendFlushScheduled=!1;let e=this._sendQueue,t=this._sendQueueBytes;if(this._sendQueue=[],this._sendQueueBytes=0,!e.length||!this._dataPort)return;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.byteLength;this._dataPort.postMessage(n.buffer,[n.buffer])}))}addMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:5,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:7,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}address(){if(!this._localAddress)throw Error(`EBADF`);return this._localAddress}bind(...e){let n=r.o(...e),i=this._type===`udp6`?`::`:`0.0.0.0`,a=this.__webvpn_udp_socket_init__(t.o(`a udp socket`).then(e=>e.cloud.webvpn.udpSocket({type:this._type,address:n.address??i,port:n.port,dataPort:!0})));return n.callback&&a.then(e=>{e&&n.callback.call(this)}),this}__webvpn_udp_socket_init__(e,t){return t&&(this._localAddress={address:t.localAddress,family:t.localFamily,port:t.localPort}),this._busyRelease??=n.t(`udp socket`),this._webVPNUdpSocketPromise=e.then(e=>{if(e.dataPort)this._socketId=e.socketId,this._dataPort=e.dataPort,this._dataPortAcks=e.dataPortAcks===!0,this._dataPort.onmessage=e=>{try{this._onDataPortBatch(e.data)}finally{this._ackDataPortBatch(e.data.byteLength)}};else{let t=e.dataReadableStream.getReader();(async()=>{for(;;){let{value:e,done:n}=await t.read();if(n)return;this.emit(`message`,i.Buffer.from(e.data),{address:e.address,family:e.family,port:e.port,size:e.size})}})().catch(e=>this._onTransportClosed(e instanceof Error?e.message:void 0))}return e.closed?.then(e=>this._onTransportClosed(e?.reason)).catch(()=>{}),this._localAddress={address:e.localAddress,family:e.localFamily,port:e.localPort},e}).catch(e=>{this.emit(`error`,e)}),this._webVPNUdpSocketPromise.then(e=>{if(!e){this._busyRelease?.();return}this.emit(`listening`)}),this._webVPNUdpSocketPromise}close(e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);return this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=this._destroyed;this._destroyed=!0,this._busyRelease?.(),this._dataPort?.close(),this._dataPort=void 0;try{await t.close()}finally{try{e&&e()}finally{n||this.emit(`close`)}}}).catch(()=>{}),this}connect(...e){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(async t=>{if(!t)throw Error(`Socket not bound`);let n=e[0],r=this._type===`udp6`?`::1`:`127.0.0.1`,i=typeof e[1]==`string`?e[1]:r,a=typeof e.at(-1)==`function`?e.at(-1):void 0,o=await t.connect({remotePort:n,remoteAddress:i});this._connectedLocally=o?.local===!0,this._remoteAddress=o?.address?{address:o.address,family:o.family,port:o.port}:{address:i,family:this._type===`udp6`?`IPv6`:`IPv4`,port:n},this._connectGeneration+=1,a&&a()}).catch(e=>{this.emit(`error`,e)})}disconnect(){if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);let e=this._remoteAddress,t=this._connectedLocally,n=this._connectGeneration;this._remoteAddress=void 0,this._connectedLocally=void 0,this._webVPNUdpSocketPromise.then(e=>e?.disconnect?.()).catch(r=>{this._connectGeneration===n&&(this._remoteAddress=e,this._connectedLocally=t),this.emit(`error`,r)})}dropMembership(e,t){if(o.Address4.isValid(e)){let n=d(e),r=t&&o.Address4.isValid(t)?d(t):new Uint8Array([0,0,0,0]);this._setUdpOption({type:6,group:n,interface:r})}else if(o.Address6.isValid(e)){let t=p(e);this._setUdpOption({type:8,group:t,ifIndex:0})}else this.emit(`error`,Error(`Invalid multicast address: ${e}`))}getRecvBufferSize(){return this._lastRecvBufferSize}getSendBufferSize(){return this._lastSendBufferSize}getSendQueueSize(){return 0}getSendQueueCount(){return 0}ref(){return this}remoteAddress(){if(!this._remoteAddress)throw Error(`ERR_SOCKET_DGRAM_NOT_CONNECTED`);return{address:this._remoteAddress.address,family:this._remoteAddress.family,port:this._remoteAddress.port}}send(...e){this._webVPNUdpSocketPromise||this.bind();let t=r.s(...e),n=u(t.message),i=n;if(t.hasRange){let{offset:e,length:r}=t;if(!Number.isInteger(e)||e<0||e>n.byteLength)throw Object.assign(RangeError(`"offset" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});if(!Number.isInteger(r)||r<0||r>n.byteLength-e)throw Object.assign(RangeError(`"length" is outside of buffer bounds`),{code:`ERR_BUFFER_OUT_OF_BOUNDS`});i=n.subarray(e,e+r)}let a=this._type===`udp6`?`::1`:`127.0.0.1`;if(!this._webVPNUdpSocketPromise)throw Error(`Socket not bound`);this._webVPNUdpSocketPromise.then(e=>{if(!e)throw Error(`Socket not bound`);let n=t.callback,r=t.address??a,s=this._remoteAddress!==void 0&&t.address===void 0;if(this._dataPort&&(s||o.Address4.isValid(r)||o.Address6.isValid(r))){this._portSend(i,s?void 0:r,s?void 0:t.port),n?.call(this,null,i.byteLength);return}e.send({port:t.port,address:r,message:i.byteOffset===0&&i.byteLength===i.buffer.byteLength?i.buffer:i.buffer.slice(i.byteOffset,i.byteOffset+i.byteLength)}).then(()=>n?.call(this,null,i.byteLength),e=>n?n.call(this,e,0):this.emit(`error`,e))})}setBroadcast(e){this._setUdpOption({type:0,value:e})}setMulticastInterface(e){}setMulticastLoopback(e){return this._setUdpOption({type:3,value:e}),this._setUdpOption({type:4,value:e}),this._lastMulticastLoopback=e,e}setMulticastTTL(e){return this._setUdpOption({type:2,value:e}),this._lastMulticastTtl=e,e}setRecvBufferSize(e){this._setUdpOption({type:10,value:e}),this._lastRecvBufferSize=e}setSendBufferSize(e){this._setUdpOption({type:9,value:e}),this._lastSendBufferSize=e}setTTL(e){return this._setUdpOption({type:1,value:e}),this._lastTtl=e,e}unref(){return this}addSourceSpecificMembership(e,t,n){}dropSourceSpecificMembership(e,t,n){}async[Symbol.asyncDispose](){await new Promise(e=>{this.close(e)})}},l=new Uint8Array([2]),u=e=>{if(typeof e==`string`)return r.l.encode(e);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(Array.isArray(e)){let t=e.map(u),n=new Uint8Array(t.reduce((e,t)=>e+t.byteLength,0)),r=0;for(let e of t)n.set(e,r),r+=e.byteLength;return n}return new Uint8Array(e)},d=e=>{let t=e.split(`.`).map(e=>parseInt(e,10));if(t.length!==4||t.some(e=>Number.isNaN(e)||e<0||e>255))throw Error(`Invalid IPv4 address: ${e}`);return new Uint8Array(t)},f=e=>{let t=[];for(let n=0;n<16;n+=2)t.push(e[n]<<8|e[n+1]);let n=-1,r=1;for(let e=0;e<8;){if(t[e]!==0){e++;continue}let i=e;for(;i<8&&t[i]===0;)i++;i-e>r&&(n=e,r=i-e),e=i}return n===-1?t.map(e=>e.toString(16)).join(`:`):`${t.slice(0,n).map(e=>e.toString(16)).join(`:`)}::${t.slice(n+r).map(e=>e.toString(16)).join(`:`)}`},p=e=>{let t=new o.Address6(e).getBitsBase16(0,128).match(/.{2}/g);if(!t||t.length!==16)throw Error(`Invalid IPv6 address: ${e}`);return new Uint8Array(t.map(e=>parseInt(e,16)))},m=(e,t)=>{let n=new c(typeof e==`string`?{type:e}:e);return t&&n.on(`message`,t),n},h={Socket:c,createSocket:m};exports.Socket=c,exports.createSocket=m,exports.default=h,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return s}});

package/dgram.d.ts

@@ -1,6 +1,6 @@
 import { v as UdpSocketOption } from "./wire-Gbo-D74t.js";
-import { P as Resolvers, ot as UdpSocketResult } from "./contract-CahPObYc.js";
-import "./api-Cc5qxCHP.js";
+import { B as Resolvers, yt as UdpSocketResult } from "./contract-D37GGkou.js";
+import "./api-CfmRAze5.js";
 import { Buffer } from "buffer";
 import { AddressInfo } from "net";
 import { EventEmitter } from "events";
@@ -15,7 +15,7 @@ interface EventEmitterOptions {
    */
   captureRejections?: boolean | undefined;
 }
-declare class Socket extends EventEmitter implements Socket$2 {
+export declare class Socket extends EventEmitter implements Socket$2 {
   _type: 'udp4' | 'udp6';
   _localAddress?: {
     address: string;
@@ -112,10 +112,10 @@ declare class Socket extends EventEmitter implements Socket$2 {
   dropSourceSpecificMembership(sourceAddress: string, groupAddress: string, multicastInterface?: string | undefined): void;
   [Symbol.asyncDispose](): Promise<void>;
 }
-declare const createSocket: (options: SocketType | SocketOptions, callback?: (msg: Buffer, rinfo: RemoteInfo) => void) => Socket;
+export declare const createSocket: (options: SocketType | SocketOptions, callback?: (msg: Buffer, rinfo: RemoteInfo) => void) => Socket;
 declare const _default: {
   Socket: typeof Socket;
   createSocket: typeof createSocket;
 };
 //#endregion
-export { Socket, createSocket, _default as default, dgram_d_exports as t };
+export { _default as default, dgram_d_exports as t };

package/dgram.js

@@ -1,5 +1,5 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { o as t } from "./api-BlAtp6lc.js";
+import { o as t } from "./api-CtiKFcK3.js";
 import { t as n } from "./busy-B189uX--.js";
 import { l as r, n as i, o as a, s as o } from "./utils-C-cAd4r4.js";
 import "./wire.js";

package/dns.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-Beky02FK.cjs");var n=e.t({lookup:()=>r}),r=(e,n)=>t.a.then(t=>t.cloud.dns.lookup(e,n));exports.lookup=r,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./api-Djf-XdZ4.cjs");var n=e.t({lookup:()=>r}),r=(e,n)=>t.a.then(t=>t.cloud.dns.lookup(e,n));exports.lookup=r,Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return n}});

package/dns.d.ts

@@ -1,10 +1,10 @@
-import { n as AddressLookupResult } from "./contract-CahPObYc.js";
+import { a as AddressLookupResult } from "./contract-D37GGkou.js";
 declare namespace dns_d_exports {
   export { AddressLookupResult, lookup };
 }
-declare const lookup: <T extends boolean = false>(hostname: string, options?: {
+export declare const lookup: <T extends boolean = false>(hostname: string, options?: {
   all?: T;
   family?: 0 | 4 | 6;
 }) => Promise<T extends true ? AddressLookupResult[] : AddressLookupResult | undefined>;
 //#endregion
-export { type AddressLookupResult, lookup, dns_d_exports as t };
+export { type AddressLookupResult, dns_d_exports as t };

package/dns.js

@@ -1,5 +1,5 @@
 import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
-import { a as t } from "./api-BlAtp6lc.js";
+import { a as t } from "./api-CtiKFcK3.js";
 //#region src/dns.ts
 var n = /* @__PURE__ */ e({ lookup: () => r }), r = (e, n) => t.then((t) => t.cloud.dns.lookup(e, n));
 //#endregion

package/extension-DJQ0oYdk.js

@@ -0,0 +1,89 @@
+import { t as e } from "./rolldown-runtime-Dy4uBu1J.js";
+import { $ as t, A as n, B as r, C as i, D as a, E as o, F as s, G as c, H as l, I as u, J as ee, K as te, L as ne, M as d, N as f, O as p, P as m, R as h, S as g, T as _, U as v, V as y, W as b, X as x, Z as S, _ as C, a as w, at as T, b as E, d as D, et as O, f as k, g as A, h as re, i as j, it as M, j as N, k as P, m as F, n as I, nt as L, p as R, q as z, r as B, rt as V, t as H, tt as U, v as W, y as G, z as K } from "./lib-B-jGWfsv.js";
+import { a as q, d as J } from "./api-CtiKFcK3.js";
+import { t as Y } from "./proxy-DDwY3AVG.js";
+import { available as X, fetch as ie } from "./desktop.js";
+//#region src/extension-prompt.ts
+var Z = async (e) => {
+	if (typeof window > "u") return !1;
+	if (c()) return !0;
+	let t = await q, n = null, r = new Promise((e) => {
+		n = () => {
+			c() && e(!0);
+		}, b.addEventListener("statuschange", n);
+	}), i = t.installPrompt.show(e).then(() => !1), a = await Promise.race([r, i]);
+	return n && b.removeEventListener("statuschange", n), await t.installPrompt.hide().catch(() => {}), a;
+}, Q = null;
+z(() => (Q ||= Z().then(() => void 0).finally(() => {
+	Q = null;
+}), Q));
+//#endregion
+//#region src/auto.ts
+var $ = () => typeof document < "u" && c(), ae = async (e, t) => {
+	if (J(e), t?.credentials === "include") {
+		if (typeof document > "u") throw Error("fetch with credentials needs the FKN extension, which only exists in window realms");
+		return m(e, t);
+	}
+	return $() ? m(e, {
+		...t,
+		credentials: "omit"
+	}) : X() ? ie(e, t) : Y(e, t);
+}, oe = /* @__PURE__ */ e({
+	ATTACH_FRAME_EVENT_KEY: () => j,
+	CATEGORIES: () => a,
+	EXTENSION_ABI: () => 2,
+	ExtensionOperationUnsupportedError: () => x,
+	ExtensionOutdatedError: () => S,
+	FORGEABLE_HEADERS: () => r,
+	FrameWindowBlockedError: () => D,
+	FrameWindowRefusedError: () => k,
+	LOCATOR_DENIED: () => i,
+	LOCATOR_ERROR: () => o,
+	LOCATOR_UNSUPPORTED: () => E,
+	PERMISSION_DENIED: () => H,
+	REQUIRED_EXTENSION_ABI: () => 0,
+	assertAttachableFrameUrl: () => A,
+	assertFetchableUrl: () => f,
+	assertForgeableHeaders: () => y,
+	assertLockdownApplicable: () => C,
+	assertOneCookieIdentity: () => l,
+	attachFrame: () => w,
+	attachFramePermission: () => R,
+	available: () => $,
+	box: () => U,
+	cookies: () => N,
+	createFrame: () => F,
+	createVideoElementHandle: () => L,
+	events: () => b,
+	extension: () => b,
+	fetch: () => m,
+	fetchCredentialedPermission: () => s,
+	fetchLocalPermission: () => u,
+	fetchPermission: () => ne,
+	gotoPermission: () => re,
+	handleRevivableModules: () => O,
+	hasForgedCookie: () => v,
+	isBlockedFetchUrl: () => h,
+	isBlockedFrameUrl: () => W,
+	isExtensionExposed: () => c,
+	isLocalNetworkUrl: () => K,
+	isLocatorDenied: () => G,
+	isLocatorUnsupported: () => g,
+	isPermissionDenied: () => I,
+	isTerminalError: () => _,
+	isType: () => V,
+	modifyRequestHeadersPermission: () => p,
+	permissions: () => B,
+	promptInstall: () => Z,
+	readCookiePermission: () => d,
+	readExtensionHandshake: () => te,
+	removeRequestHeaderRule: () => P,
+	revive: () => M,
+	setMissingExtensionHandler: () => z,
+	setRequestHeaderRule: () => n,
+	supportsOperation: () => t,
+	type: () => T,
+	waitForExtensionExposure: () => ee
+});
+//#endregion
+export { Z as i, ae as n, $ as r, oe as t };

package/extension-DSrUjoLw.cjs

@@ -0,0 +1 @@
+const e=require("./rolldown-runtime-BIInC43l.cjs"),t=require("./lib-Cjd91q7g.cjs"),n=require("./api-Djf-XdZ4.cjs"),r=require("./proxy-CYcaW5ew.cjs"),i=require("./desktop.cjs");var a=async e=>{if(typeof window>`u`)return!1;if(t.G())return!0;let r=await n.a,i=null,a=new Promise(e=>{i=()=>{t.G()&&e(!0)},t.W.addEventListener(`statuschange`,i)}),o=r.installPrompt.show(e).then(()=>!1),s=await Promise.race([a,o]);return i&&t.W.removeEventListener(`statuschange`,i),await r.installPrompt.hide().catch(()=>{}),s},o=null;t.q(()=>(o||=a().then(()=>void 0).finally(()=>{o=null}),o));var s=()=>typeof document<`u`&&t.G(),c=async(e,a)=>{if(n.d(e),a?.credentials===`include`){if(typeof document>`u`)throw Error(`fetch with credentials needs the FKN extension, which only exists in window realms`);return t.P(e,a)}return s()?t.P(e,{...a,credentials:`omit`}):i.available()?i.fetch(e,a):r.t(e,a)},l=e.t({ATTACH_FRAME_EVENT_KEY:()=>t.i,CATEGORIES:()=>t.D,EXTENSION_ABI:()=>2,ExtensionOperationUnsupportedError:()=>t.X,ExtensionOutdatedError:()=>t.Z,FORGEABLE_HEADERS:()=>t.B,FrameWindowBlockedError:()=>t.d,FrameWindowRefusedError:()=>t.f,LOCATOR_DENIED:()=>t.C,LOCATOR_ERROR:()=>t.E,LOCATOR_UNSUPPORTED:()=>t.b,PERMISSION_DENIED:()=>t.t,REQUIRED_EXTENSION_ABI:()=>0,assertAttachableFrameUrl:()=>t.g,assertFetchableUrl:()=>t.N,assertForgeableHeaders:()=>t.V,assertLockdownApplicable:()=>t._,assertOneCookieIdentity:()=>t.H,attachFrame:()=>t.a,attachFramePermission:()=>t.p,available:()=>s,box:()=>t.tt,cookies:()=>t.j,createFrame:()=>t.m,createVideoElementHandle:()=>t.nt,events:()=>t.W,extension:()=>t.W,fetch:()=>t.P,fetchCredentialedPermission:()=>t.F,fetchLocalPermission:()=>t.I,fetchPermission:()=>t.L,gotoPermission:()=>t.h,handleRevivableModules:()=>t.et,hasForgedCookie:()=>t.U,isBlockedFetchUrl:()=>t.R,isBlockedFrameUrl:()=>t.v,isExtensionExposed:()=>t.G,isLocalNetworkUrl:()=>t.z,isLocatorDenied:()=>t.y,isLocatorUnsupported:()=>t.S,isPermissionDenied:()=>t.n,isTerminalError:()=>t.T,isType:()=>t.rt,modifyRequestHeadersPermission:()=>t.O,permissions:()=>t.r,promptInstall:()=>a,readCookiePermission:()=>t.M,readExtensionHandshake:()=>t.K,removeRequestHeaderRule:()=>t.k,revive:()=>t.it,setMissingExtensionHandler:()=>t.q,setRequestHeaderRule:()=>t.A,supportsOperation:()=>t.$,type:()=>t.at,waitForExtensionExposure:()=>t.J});Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return a}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return c}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return l}});